bundler-audit 0.7.0.1 → 0.9.0.1

data/data/ruby-advisory-db/gems/yajl-ruby/CVE-2017-16516.yml

@@ -1,19 +0,0 @@
----
-gem: yajl-ruby
-cve: 2017-16516
-url: https://nvd.nist.gov/vuln/detail/CVE-2017-16516
-title: Flaw in yajl-ruby gem may cause a DoS
-date: 2017-11-03
-
-description: |
-  In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to
-  Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the 
-  yajl_string_decode function in yajl_encode.c. This results in the whole ruby 
-  process terminating and potentially a denial of service.
-
-patched_versions:
-  - ">= 1.3.1"
-
-related:
-  url:
-    - https://github.com/brianmario/yajl-ruby/issues/176

data/data/ruby-advisory-db/gems/yard/CVE-2017-17042.yml

@@ -1,16 +0,0 @@
----
-gem: yard
-cve: 2017-17042
-url: https://nvd.nist.gov/vuln/detail/CVE-2017-17042
-date: 2017-11-28
-title: Potential arbitrary file read vulnerability in yard server
-description: |
-  lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block
-  relative paths with an initial ../ sequence, which allows attackers to conduct
-  directory traversal attacks and read arbitrary files.
-
-cvss_v2: 5.0
-cvss_v3: 7.5
-
-patched_versions:
-  - ">= 0.9.11"

data/data/ruby-advisory-db/gems/yard/CVE-2019-1020001.yml

@@ -1,17 +0,0 @@
----
-gem: yard
-cve: 2019-1020001
-ghsa: xfhh-rx56-rxcr
-url: https://github.com/lsegal/yard/security/advisories/GHSA-xfhh-rx56-rxcr
-date: 2019-07-02
-title: Arbitrary path traversal and file access via `yard server`
-description: |
-  A path traversal vulnerability was discovered in YARD <= 0.9.19 when using 
-  `yard server` to serve documentation. This bug would allow unsanitized HTTP
-  requests to access arbitrary files on the machine of a yard server host under
-  certain conditions.
-
-  The issue is resolved in v0.9.20 and later.
-patched_versions:
-  - ">= 0.9.20"
-cvss_v3: 7.3

data/data/ruby-advisory-db/gems/yard/GHSA-xfhh-rx56-rxcr.yml

@@ -1,12 +0,0 @@
----
-gem: yard
-ghsa: xfhh-rx56-rxcr
-date: 2019-07-02
-url: https://github.com/lsegal/yard/security/advisories/GHSA-xfhh-rx56-rxcr
-title: Possible arbitrary path traversal and file access via `yard server`
-description: A path traversal vulnerability was discovered in YARD <= 0.9.19 when
-  using `yard server` to serve documentation. This bug would allow unsanitized HTTP
-  requests to access arbitrary files on the machine of a yard server host under certain
-  conditions.
-patched_versions:
-- ">= 0.9.20"

data/data/ruby-advisory-db/lib/cf_scrape.py

@@ -1,5 +0,0 @@
-import cfscrape
-import sys
-
-scraper = cfscrape.create_scraper() # returns a requests.Session object
-print scraper.get(sys.argv[1]).content

data/data/ruby-advisory-db/lib/github_advisory_sync.rb

@@ -1,296 +0,0 @@
-require "faraday"
-require "json"
-require "yaml"
-require "open-uri"
-
-module GitHub
-  class GitHubAdvisorySync
-
-    # Sync makes sure there are rubysec advisories for all GitHub advisories
-    # It writes a set of yaml files, one for each GitHub Advisory that
-    # is not already present in this repo
-    #
-    # The min_year argument specifies the earliest year CVE to sync.
-    # It is more important to sync the newer ones, so this allows the user to
-    # control how old of CVEs the sync should pull over
-    def self.sync(min_year: 2015)
-      gh_advisories = GraphQLAPIClient.new.retrieve_all_rubygem_publishable_advisories
-
-      # Filter out advisories with a CVE year that is before the min_year
-      gh_advisories.select! do |advisory|
-        if advisory.cve_id
-          _, cve_year = advisory.cve_id.match(/^CVE-(\d+)-\d+$/).to_a
-          cve_year.to_i >= min_year
-        else
-          true # all advisories without a CVE are included too
-        end
-      end
-
-      files_written = []
-      gh_advisories.each do |advisory|
-        files_written += advisory.write_files
-      end
-
-      puts "\nSync completed"
-      if files_written.empty?
-        puts "Nothing to sync today! All CVEs starting from #{min_year} are already present"
-      else
-        puts "Wrote these files:\n#{files_written.to_yaml}"
-      end
-
-      files_written
-    end
-  end
-
-  class GraphQLAPIClient
-    GITHUB_API_URL = "https://api.github.com/graphql"
-
-    GitHubApiTokenMissingError = Class.new(StandardError)
-
-    # return a lazy initialized connection to github api
-    def github_api(adapter = :net_http)
-      @faraday_connection ||= begin
-        puts "Initializing GitHub API connection to URL: #{GITHUB_API_URL}"
-        Faraday.new do |conn_builder|
-          conn_builder.adapter adapter
-          conn_builder.headers = {
-            "User-Agent" => "rubysec/ruby-advisory-db rubysec sync script",
-            "Content-Type" => "application/json",
-            "Authorization" => "token #{github_api_token}"
-          }
-        end
-      end
-      @faraday_connection
-    end
-
-    # An error class which gets raised when a GraphQL request fails
-    GitHubGraphQLAPIError = Class.new(StandardError)
-
-    # all interactions with the API go through this method to standardize
-    # error checking and how queries and requests are formed
-    def github_graphql_query(graphql_query_name, graphql_variables = {})
-      graphql_query_str = GraphQLQueries.const_get graphql_query_name
-      graphql_body = JSON.generate query: graphql_query_str,
-                                   variables: graphql_variables
-      puts "Executing GraphQL request: #{graphql_query_name}. Request variables:\n#{graphql_variables.to_yaml}\n"
-      faraday_response = github_api.post do |req|
-        req.url GITHUB_API_URL
-        req.body = graphql_body
-      end
-      puts "Got response code: #{faraday_response.status}"
-      if faraday_response.status != 200
-        raise(GitHubGraphQLAPIError, "GitHub GraphQL request to #{faraday_response.env.url} failed: #{faraday_response.body}")
-      end
-      body_obj = JSON.parse faraday_response.body
-      if body_obj["errors"]
-        raise(GitHubGraphQLAPIError, body_obj["errors"].map { |e| e["message"] }.join(", "))
-      end
-      body_obj
-    end
-
-    def retrieve_all_github_advisories(max_pages = 1000, page_size = 100)
-      all_advisories = []
-      variables = { "first" => page_size }
-      max_pages.times do |page_num|
-        puts "Getting page #{page_num + 1} of GitHub Advisories"
-        page = github_graphql_query(:GITHUB_ADVISORIES_WITH_RUBYGEM_VULNERABILITY, variables)
-        advisories_this_page = page["data"]["securityAdvisories"]["nodes"]
-        all_advisories += advisories_this_page
-        break unless page["data"]["securityAdvisories"]["pageInfo"]["hasNextPage"] == true
-        variables["after"] = page["data"]["securityAdvisories"]["pageInfo"]["endCursor"]
-      end
-      puts "Retrieved #{all_advisories.length} Advisories from GitHub API"
-
-      all_advisories.map do |advisory_graphql_obj|
-        GitHubAdvisory.new github_advisory_graphql_object: advisory_graphql_obj
-      end
-    end
-
-    def retrieve_all_rubygem_publishable_advisories
-      all_advisories = retrieve_all_github_advisories
-      # remove withdrawn advisories,
-      # and remove those where there are no vulnerabilities for ruby
-      all_advisories.reject { |advisory| advisory.withdrawn? }
-                    .select { |advisory| advisory.has_ruby_vulnerabilities? }
-    end
-
-    module GraphQLQueries
-      GITHUB_ADVISORIES_WITH_RUBYGEM_VULNERABILITY = <<-GRAPHQL.freeze
-        query($first: Int, $after: String) {
-          securityAdvisories(first: $first, after: $after) {
-            pageInfo {
-              endCursor
-              hasNextPage
-              hasPreviousPage
-              startCursor
-            }
-            nodes {
-              identifiers {
-                type
-                value
-              }
-              summary
-              description
-              severity
-              references {
-                url
-              }
-              publishedAt
-              withdrawnAt
-              vulnerabilities(ecosystem:RUBYGEMS, first: 10) {
-                nodes {
-                  package {
-                    name
-                    ecosystem
-                  }
-                  vulnerableVersionRange
-                  firstPatchedVersion {
-                    identifier
-                  }
-                }
-              }
-            }
-          }
-        }
-      GRAPHQL
-    end
-
-    private
-
-    def github_api_token
-      unless ENV["GH_API_TOKEN"]
-        raise GitHubApiTokenMissingError, "Unable to make API requests.  Must define 'GH_API_TOKEN' environment variable."
-      end
-      ENV["GH_API_TOKEN"]
-    end
-  end
-
-  class GitHubAdvisory
-
-    attr_reader :github_advisory_graphql_object
-
-    def initialize(github_advisory_graphql_object:)
-      @github_advisory_graphql_object = github_advisory_graphql_object
-    end
-
-    def identifier_list
-      github_advisory_graphql_object["identifiers"]
-    end
-
-    # extract the CVE identifier from the GitHub Advisory identifier list
-    def cve_id
-      cve_id_obj = identifier_list.find { |id| id["type"] == "CVE" }
-      return nil unless cve_id_obj
-
-      cve_id_obj["value"]
-    end
-
-    def ghsa_id
-      id_obj = identifier_list.find { |id| id["type"] == "GHSA" }
-      id_obj["value"]
-    end
-
-    # advisories should be identified by CVE ID if there is one
-    # but for maintainer submitted advisories there may not be one,
-    # so a GitHub Security Advisory ID (ghsa_id) is used instead
-    def primary_id
-      return cve_id if cve_id
-      ghsa_id
-    end
-
-    # return a date as a string like 2019-03-21.
-    def published_day
-      return nil unless github_advisory_graphql_object["publishedAt"]
-
-      pub_date = Date.parse(github_advisory_graphql_object["publishedAt"])
-      # pub_date.strftime("%Y-%m-%d")
-      pub_date
-    end
-
-    def package_names
-      github_advisory_graphql_object["vulnerabilities"]["nodes"].map{|v| v["package"]["name"]}.uniq
-    end
-
-    def rubysec_filenames
-      package_names.map do |package_name|
-        File.join("gems", package_name, "#{cve_id}.yml")
-      end
-    end
-
-    def withdrawn?
-      !github_advisory_graphql_object["withdrawnAt"].nil?
-    end
-
-    def external_reference
-      github_advisory_graphql_object["references"].first["url"]
-    end
-
-    def vulnerabilities
-      github_advisory_graphql_object["vulnerabilities"]["nodes"]
-    end
-
-    def has_ruby_vulnerabilities?
-      vulnerabilities.any? do |vuln|
-        vuln["package"]["ecosystem"] == "RUBYGEMS"
-      end
-    end
-
-    def some_rubysec_files_do_not_exist?
-      rubysec_filenames.any?{|filename| !File.exist?(filename) }
-    end
-
-    def write_files
-      return [] unless some_rubysec_files_do_not_exist?
-
-      files_written = []
-      vulnerabilities.each do |vulnerability|
-        filename_to_write = File.join("gems", vulnerability["package"]["name"], "#{primary_id}.yml")
-        next if File.exist?(filename_to_write)
-
-        data = {
-          "gem" => vulnerability["package"]["name"],
-          "ghsa" => ghsa_id[5..],
-          "url" => external_reference,
-          "date" => published_day,
-          "title" => github_advisory_graphql_object["summary"],
-          "description" => github_advisory_graphql_object["description"],
-          "cvss_v3" => "<FILL IN IF AVAILABLE>",
-          "patched_versions" => [ "<FILL IN SEE BELOW>" ],
-          "unaffected_versions" => [ "<OPTIONAL: FILL IN SEE BELOW>" ]
-        }
-        data["cve"] = cve_id[4..20] if cve_id
-
-        dir_to_write = File.dirname(filename_to_write)
-        Dir.mkdir dir_to_write unless Dir.exist?(dir_to_write)
-        File.open(filename_to_write, "w") do |file|
-          # create an automatically generated advisory yaml file
-          file.write data.to_yaml
-
-          # The data we just wrote is incomplete,
-          # and therefore should not be committed as is
-          # We can not directly translate from GitHub to rubysec advisory format
-          #
-          # The patched_versions field is not exactly available.
-          # - GitHub has a first_patched_version field,
-          #   but rubysec advisory needs a ruby version spec
-          #
-          # The unnaffected_versions field is similarly not directly available
-          # This optional field must be inferred from the vulnerableVersionRange
-          #
-          # To help write those fields, we put all the github data below.
-          #
-          # The second block of yaml in a .yaml file is ignored (after the second "---" line)
-          # This effectively makes this data a large comment
-          # Still it should be removed before the data goes into rubysec
-          file.write "\n\n# GitHub advisory data below - **Remove this data before committing**\n"
-          file.write "# Use this data to write patched_versions (and potentially unaffected_versions) above\n"
-          file.write github_advisory_graphql_object.to_yaml
-        end
-        puts "Wrote: #{filename_to_write}"
-        files_written << filename_to_write
-      end
-
-      files_written
-    end
-  end
-end

data/data/ruby-advisory-db/libraries/rubygems

@@ -1 +0,0 @@
-../gems/rubygems-update

data/data/ruby-advisory-db/rubies/jruby/CVE-2010-1330.yml

@@ -1,17 +0,0 @@
----
-engine: jruby
-cve: 2010-1330
-osvdb: 77297
-url: http://jruby.org/2010/04/26/jruby-1-4-1-xss-vulnerability
-title: |
-  JRuby XSS in the regular expression engine when processing invalid UTF-8 byte
-  sequences
-date: 2010-04-26
-description: |
-  The regular expression engine in JRuby before 1.4.1, when $KCODE is set to
-  'u', does not properly handle characters immediately after a UTF-8
-  character, which allows remote attackers to conduct cross-site scripting
-  (XSS) attacks via a crafted string.
-cvss_v2: 4.3
-patched_versions:
-  - ">= 1.4.1"

data/data/ruby-advisory-db/rubies/jruby/CVE-2011-4838.yml

@@ -1,15 +0,0 @@
----
-engine: jruby
-cve: 2011-4838
-osvdb: 78116
-url: http://jruby.org/2011/12/27/jruby-1-6-5-1
-title: JRuby Hash Collision Form Parameter Parsing Remote DoS
-date: 2011-12-27
-description: |
-  JRuby contains a flaw that may allow a remote denial of service. The issue is
-  triggered when an attacker sends multiple crafted parameters which trigger
-  hash collisions, and will result in loss of availability for the program via
-  CPU consumption.
-cvss_v2: 7.8
-patched_versions:
-  - ">= 1.6.5.1"

data/data/ruby-advisory-db/rubies/jruby/CVE-2012-5370.yml

@@ -1,17 +0,0 @@
----
-engine: jruby
-cve: 2012-5370
-osvdb: 87864
-url: http://jruby.org/2012/12/03/jruby-1-7-1
-title: JRuby MurmurHash Implementation Hash Collision Remote DoS
-date: 2012-11-23
-description: |
-  JRuby contains a flaw related to the MurmurHash implementation that may allow
-  a remote denial of service. The issue is triggered when hash values are
-  computed without having the ability to cause hash collisions restricted. When
-  sending specially crafted input to an application maintaining a hash table, a
-  context-dependent attacker can cause a consumption of CPU resources. This
-  will result in a loss of availability for the program.
-cvss_v2: 5.0
-patched_versions:
-  - ">= 1.7.1"

data/data/ruby-advisory-db/rubies/jruby/OSVDB-94644.yml

@@ -1,12 +0,0 @@
----
-engine: jruby
-osvdb: 94644
-url: http://www.osvdb.org/show/osvdb/94644
-title: JRuby Null Byte Request Arbitrary File Access
-date: 2010-05-26
-description: |
-  JRuby contains a flaw that is due to the program failing to properly check
-  for null byte requests in certain file operations. This may allow a remote
-  attacker to gain access to arbitrary files. No further details are available.
-patched_versions:
-  - ">= 1.6.2"

data/data/ruby-advisory-db/rubies/rbx/CVE-2012-5372.yml

@@ -1,17 +0,0 @@
----
-engine: rbx
-cve: 2012-5372
-osvdb: 87861
-url: http://www.osvdb.org/show/osvdb/87861
-title: Rubinius MurmurHash3 Implementation Hash Collision Remote DoS
-date: 2012-11-23
-description: |
-  Rubinius contains a flaw related to the MurmurHash3 implementation that may
-  allow a remote denial of service. The issue is triggered when hash values
-  are computed without having the ability to cause hash collisions restricted.
-  When sending specially crafted input to an application maintaining a hash
-  table, a context-dependent attacker can cause a consumption of CPU resources.
-  This will result in a loss of availability for the program.
-cvss_v2: 5.0
-patched_versions:
-  - ">= 1.3.1"

data/data/ruby-advisory-db/rubies/rbx/OSVDB-78119.yml

@@ -1,13 +0,0 @@
----
-engine: rbx
-osvdb: 78119
-url: http://www.osvdb.org/show/osvdb/78119
-title: Rubinius Hash Collision Form Parameter Parsing Remote DoS
-date: 2011-12-28
-description: |
-  Rubinius contains a flaw that may allow a remote denial of service. The issue
-  is triggered when an attacker sends multiple crafted parameters which trigger
-  hash collisions, and will result in loss of availability for the program via
-  CPU consumption.
-patched_versions:
-  - ">= 1.3.1"

data/data/ruby-advisory-db/rubies/ruby/CVE-2007-5162.yml

@@ -1,16 +0,0 @@
----
-engine: ruby
-cve: 2007-5162
-url: https://www.ruby-lang.org/en/news/2007/10/04/net-https-vulnerability/
-title: Ruby Net::HTTPS library does not validate server certificate CN
-date: 2007-09-27
-description: |
-  The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS
-  libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN)
-  field in a server certificate matches the domain name in an HTTPS request,
-  which makes it easier for remote attackers to intercept SSL transmissions via
-  a man-in-the-middle attack or spoofed web site.
-cvss_v2: 4.3
-patched_versions:
-  - ~> 1.8.5.114
-  - ">= 1.8.6.111"

data/data/ruby-advisory-db/rubies/ruby/CVE-2007-5770.yml

@@ -1,17 +0,0 @@
----
-engine: ruby
-cve: 2007-5770
-url: http://www.cvedetails.com/cve/CVE-2007-5770/
-title: Ruby Net::HTTPS library does not validate server certificate CN
-date: 2007-10-08
-description: |
-  The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5)
-  Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the
-  commonName (CN) field in a server certificate matches the domain name in a
-  request sent over SSL, which makes it easier for remote attackers to
-  intercept SSL transmissions via a man-in-the-middle attack or spoofed web
-  site, different components than CVE-2007-5162. 
-cvss_v2: 4.3
-patched_versions:
-  - ~> 1.8.6.230
-  - ">= 1.8.7"

data/data/ruby-advisory-db/rubies/ruby/CVE-2008-1447.yml

@@ -1,15 +0,0 @@
----
-engine: ruby
-cve: 2008-1447
-url: https://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/
-title: ruby -- DNS spoofing vulnerability in resolv.rb
-date: 2008-05-05
-description: |
-  resolv.rb allow remote attackers to spoof DNS answers. This risk can be
-  reduced by randomness of DNS transaction IDs and source ports, so
-  resolv.rb is fixed to randomize them.
-cvss_v2: 5.0
-patched_versions:
-  - ~> 1.8.6.287
-  - ~> 1.8.7.72
-  - ">= 1.9.0"

data/data/ruby-advisory-db/rubies/ruby/CVE-2008-1891.yml

@@ -1,21 +0,0 @@
----
-engine: ruby
-cve: 2008-1891
-url: http://aluigi.altervista.org/adv/webrickcgi-adv.txt
-title: Directory traversal vulnerability in WEBrick
-date: 2008-04-15
-description: |
-  Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5
-  before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0
-  before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers
-  to read arbitrary CGI files via a trailing (1) + (plus), (2) %2b (encoded
-  plus), (3) . (dot), (4) %2e (encoded dot), or (5) %20 (encoded space)
-  character in the URI, possibly related to the
-  WEBrick::HTTPServlet::FileHandler and WEBrick::HTTPServer.new functionality
-  and the :DocumentRoot option. 
-cvss_v2: 5.0
-patched_versions:
-  - ~> 1.8.5.231
-  - ~> 1.8.6.230
-  - ~> 1.8.7.22
-  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/CVE-2008-2376.yml

@@ -1,18 +0,0 @@
----
-engine: ruby
-cve: 2008-2376
-url: http://www.openwall.com/lists/oss-security/2008/07/02/3
-title: More ruby integer overflows (rb_ary_fill / Array#fill)
-date: 2008-06-30
-description: |
-  Integer overflow in the rb_ary_fill function in array.c in Ruby before
-  revision 17756 allows context-dependent attackers to cause a denial of
-  service (crash) or possibly have unspecified other impact via a call to the
-  Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE.
-  NOTE: this issue exists because of an incomplete fix for other closely
-  related integer overflows.
-cvss_v2: 7.5
-patched_versions:
-  - ~> 1.8.6.286
-  - ~> 1.8.7.71
-  - ">= 1.9.0"

data/data/ruby-advisory-db/rubies/ruby/CVE-2008-2662.yml

@@ -1,22 +0,0 @@
----
-engine: ruby
-cve: 2008-2662
-osvdb: 46550
-url: http://www.osvdb.org/show/osvdb/46550
-title: Ruby rb_str_buf_append Function Multiple Overflows
-date: 2008-06-20
-description: |
-  Multiple integer overflows in the rb_str_buf_append
-  function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230,
-  1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers
-  to execute arbitrary code or cause a denial of service via unknown vectors that
-  trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664,
-  and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple
-  CVE identifiers related to Ruby. This CVE description should be regarded as authoritative,
-  although it is likely to change.
-cvss_v2: 10.0
-patched_versions:
-  - ~> 1.8.5.231
-  - ~> 1.8.6.230
-  - ~> 1.8.7.22
-  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/CVE-2008-2663.yml

@@ -1,21 +0,0 @@
----
-engine: ruby
-cve: 2008-2663
-osvdb: 46551
-url: http://www.osvdb.org/show/osvdb/46551
-title: Ruby rb_ary_store Function Multiple Overflows
-date: 2008-06-20
-description: |
-  Multiple integer overflows in the rb_ary_store function
-  in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and
-  1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code
-  or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662,
-  CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent
-  usage of multiple CVE identifiers related to Ruby. The CVE description should be
-  regarded as authoritative, although it is likely to change.
-cvss_v2: 10.0
-patched_versions:
-  - ~> 1.8.5.231
-  - ~> 1.8.6.230
-  - ~> 1.8.7.22
-  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/CVE-2008-2664.yml

@@ -1,21 +0,0 @@
----
-engine: ruby
-cve: 2008-2664
-osvdb: 46552
-url: http://www.osvdb.org/show/osvdb/46552
-title: Ruby rb_str_format Function Unspecified Memory Corruption
-date: 2008-06-20
-description: |
-  The rb_str_format function in Ruby 1.8.4 and earlier,
-  1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0
-  before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via
-  unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663,
-  and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple
-  CVE identifiers related to Ruby. The CVE description should be regarded as authoritative,
-  although it is likely to change.
-cvss_v2: 7.8
-patched_versions:
-  - ~> 1.8.5.231
-  - ~> 1.8.6.230
-  - ~> 1.8.7.22
-  - ">= 1.9.0.2"

data/data/ruby-advisory-db/rubies/ruby/CVE-2008-2725.yml

@@ -1,22 +0,0 @@
----
-engine: ruby
-cve: 2008-2725
-osvdb: 46553
-url: http://www.osvdb.org/show/osvdb/46553
-title: Ruby rb_ary_splice Function REALLOC_N Overflow
-date: 2008-06-20
-description: |
-  Integer overflow in the (1) rb_ary_splice function
-  in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and
-  1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-dependent
-  attackers to trigger memory corruption via unspecified vectors, aka the "REALLOC_N"
-  variant, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664.
-  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers
-  related to Ruby. The CVE description should be regarded as authoritative, although
-  it is likely to change.
-cvss_v2: 7.8
-patched_versions:
-  - ~> 1.8.5.231
-  - ~> 1.8.6.230
-  - ~> 1.8.7.22
-  - ">= 1.9.0.2"